This is the mail archive of the java@gcc.gnu.org mailing list for the Java project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: buffer overflow possible in CNI string-handling code?

From: Bryce McKinlay <bryce at waitaki dot otago dot ac dot nz>
To: Adam Megacz <gcj at lists dot megacz dot com>
Cc: java at gcc dot gnu dot org
Date: Tue, 12 Mar 2002 13:09:36 +1300
Subject: Re: buffer overflow possible in CNI string-handling code?
References: <86vgc2eod6.fsf@megacz.com> <87n0xebsxk.fsf@creche.redhat.com> <86pu2aen40.fsf@megacz.com>

Adam Megacz wrote:

>>Assuming you use JvGetStringUTFLength, you'll get a crash, I think.
>>
>
>Cool. Is this because the code emitted for buf[foo] includes a check
>to see if (foo + sp > top_of_stack)?
>

The end of the stack is guarded by a write-protected page.

regards

Bryce.

Follow-Ups:
- Re: buffer overflow possible in CNI string-handling code?
  - From: Adam Megacz

References:
- buffer overflow possible in CNI string-handling code?
  - From: Adam Megacz
- Re: buffer overflow possible in CNI string-handling code?
  - From: Tom Tromey
- Re: buffer overflow possible in CNI string-handling code?
  - From: Adam Megacz

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]